<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
	<head>
		<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
		<link rel="stylesheet" href="styles/screen.css" type="text/css"/>
		<script src="scripts/jquery.js" type="text/javascript"></script>
		<script src="scripts/init.js" type="text/javascript"></script>
		<title>title</title>
	</head>
	<body>
		<h1 id="header">title</h1>
		<ul id="navigation"></ul>
		
		<div class="message">The valid combination is test:test. In order to make the technique working the following link must be visited: <a href="http://test:test@www.gnucitizen.org/projects/javascript-authorization-forcer/protected/protected.html" target="_blank">click here</a>.</div>
		<form>
			<label for="target">target</label><br/>
			<input name="target" value="http://www.gnucitizen.org/projects/javascript-authorization-forcer/protected/protected.html" type="text" size="50"/><br/>
			<label for="credentials">credentials</label><br/>
			<textarea name="credentials" cols="50" rows="10">test:test1
bla:bla
user:pass
test:test
pass:user
testuser1:testuser1</textarea><br/>
			<label for="result">result</label><br/>
			<textarea name="result" cols="50" rows="10"></textarea><br/>
			<input name="lazyForce" value="Lazy Force" type="button"/>
			<input name="reset" value="Reset" type="button"/>
		</form>
		
		<script src="../lib/AttackAPI/AttackAPI.js" type="text/javascript"></script>
		<script src="../lib/AttackAPI/HistoryDumper.js" type="text/javascript"></script>
		<script src="../lib/AttackAPI/AuthorizationForcer.js" type="text/javascript"></script>
		<script type="text/javascript">
			$('input[@name="lazyForce"]').click(function () {
				var form = $(this).parent().get(0);
				var credentials = form.credentials.value.split("\n");
				AttackAPI.AuthorizationForcer.lazyForce(function (target, credential, status) {
					form.result.value += credential + ' ' + status + "\n";
				}, form.target.value, credentials);
			});
			
			$('input[@name="reset"]').click(function () {
				var form = $(this).parent().get(0);
				form.result.value = '';
			});
		</script>
		
		<p id="footer"><a href="http://www.gnucitizen.org">GNUCITIZEN</a> &copy; 2006 all rights reserved</p>
	</body>
</html>